Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ce6a780-3db7-4d76-a9eb-20b6247f5f36/9f2edf65-5a81-3398-a778-390d80403861.roa
File:                     9f2edf65-5a81-3398-a778-390d80403861.roa (raw, json)
Hash identifier:          /jw6uM1b2E2SNe+ORWrcOmQhGsPLyeNPWicPhxeakr4=
Subject key identifier:   61:24:73:F1:EB:33:A7:D6:79:3C:50:FC:D6:0C:A1:25:77:49:2F:88
Certificate issuer:       /CN=6ce6a780-3db7-4d76-a9eb-20b6247f5f36
Certificate serial:       010D0C9F43285849C90414FFCEDC698408AF8C80
Authority key identifier: 8D:1D:5A:A4:18:B2:FA:CA:0B:94:BC:6A:94:9F:B7:FC:8E:1F:CF:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ce6a780-3db7-4d76-a9eb-20b6247f5f36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ce6a780-3db7-4d76-a9eb-20b6247f5f36/9f2edf65-5a81-3398-a778-390d80403861.roa
Signing time:             Thu 08 May 2025 12:59:32 +0000
ROA not before:           Thu 08 May 2025 12:59:32 +0000
ROA not after:            Wed 06 Aug 2025 12:59:32 +0000
asID:                     13942
IP address blocks:        205.236.20.0/23 maxlen: 23
                          205.236.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ce6a780-3db7-4d76-a9eb-20b6247f5f36/6ce6a780-3db7-4d76-a9eb-20b6247f5f36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ce6a780-3db7-4d76-a9eb-20b6247f5f36/6ce6a780-3db7-4d76-a9eb-20b6247f5f36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ce6a780-3db7-4d76-a9eb-20b6247f5f36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:14:ff:ce:dc:69:84:08:af:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ce6a780-3db7-4d76-a9eb-20b6247f5f36
        Validity
            Not Before: May  8 12:59:32 2025 GMT
            Not After : Aug  6 12:59:32 2025 GMT
        Subject: CN=5354a5ec-96f7-4cd5-a4b0-07483f8843f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a6:ac:04:e6:bd:b5:29:c3:d7:f5:a3:6e:4c:
                    16:df:90:b2:c2:6a:9c:61:af:4d:98:1e:d8:b5:6b:
                    f3:a0:db:fa:60:ae:f4:32:64:9c:d3:f0:27:78:80:
                    32:40:8a:ea:ac:67:c6:22:d1:5f:ae:d2:e8:7e:5f:
                    ff:75:73:c4:c2:1b:1f:f4:ed:af:8c:5a:04:e4:4e:
                    c8:15:2b:32:3a:b8:50:5b:20:28:5d:6a:65:b1:68:
                    84:0c:e1:40:36:56:bc:2d:f2:69:a0:9f:e9:33:b1:
                    45:08:d9:9e:00:9a:c8:72:f5:14:08:0f:44:b8:d0:
                    07:f2:09:fb:b7:51:f3:4b:cb:8a:0c:73:cc:38:59:
                    8e:e0:e6:a4:e6:90:a7:b1:d1:c1:de:67:b1:1a:ce:
                    de:a9:89:95:59:45:b3:48:08:b2:5b:32:9e:26:ee:
                    60:c3:9b:01:18:52:21:b0:62:41:86:04:b5:86:8a:
                    2f:97:eb:cc:c4:da:64:2f:fd:12:79:6a:ff:87:fc:
                    42:e4:89:e2:da:4b:d3:8a:3e:03:d5:8b:97:b6:e4:
                    4c:0b:bc:a7:ca:d9:64:3c:ae:7a:7b:0f:67:bf:3e:
                    17:c8:64:d7:21:b7:91:0e:4f:34:e3:24:90:c3:e7:
                    08:73:56:44:39:c5:a4:0c:d2:96:2c:8c:8c:ff:2d:
                    9e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:24:73:F1:EB:33:A7:D6:79:3C:50:FC:D6:0C:A1:25:77:49:2F:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ce6a780-3db7-4d76-a9eb-20b6247f5f36/9f2edf65-5a81-3398-a778-390d80403861.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ce6a780-3db7-4d76-a9eb-20b6247f5f36/6ce6a780-3db7-4d76-a9eb-20b6247f5f36.crl

            X509v3 Authority Key Identifier:
                keyid:8D:1D:5A:A4:18:B2:FA:CA:0B:94:BC:6A:94:9F:B7:FC:8E:1F:CF:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ce6a780-3db7-4d76-a9eb-20b6247f5f36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.20.0-205.236.22.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:33:3b:e7:08:97:34:d0:e6:54:c9:07:c0:67:0c:d4:cf:a2:
         1c:7e:13:6c:dd:3f:10:46:99:45:4c:9b:9d:27:f0:e2:b4:ca:
         b8:3b:41:54:61:d3:8d:39:49:fc:e3:c1:e1:9f:47:db:c5:8d:
         1f:26:d5:bb:2e:40:4e:1a:d8:99:6e:0a:41:ae:21:67:a5:4d:
         dc:b7:ca:4f:da:9a:8d:84:8f:f0:26:20:45:79:dd:01:5d:3b:
         ef:bd:30:01:3d:3f:bc:27:ac:5e:26:b7:0b:3e:9d:d9:30:28:
         26:58:1a:b2:19:f4:f5:4f:3e:1f:38:c0:5c:a6:2f:c3:31:41:
         6c:4a:e3:64:4a:49:9a:bc:8b:2c:a2:c6:1c:9f:0d:35:91:d5:
         bc:2a:94:a5:5a:43:41:6e:1e:8c:83:ab:aa:fb:08:94:4d:4f:
         9c:3a:32:3b:38:c8:40:31:12:33:7f:d6:0b:b0:1a:89:7f:73:
         23:d1:62:e3:4d:e5:17:d5:65:2f:a9:76:2a:98:a0:76:99:87:
         9c:9e:6d:5e:5c:36:f0:85:a5:47:01:8c:36:98:52:85:e0:3c:
         36:49:21:90:14:97:5f:b4:8e:1b:df:d7:d1:2c:d6:2c:b7:bd:
         01:37:78:d1:05:9f:31:01:ab:86:c7:27:11:21:7b:b7:18:a8:
         0c:c9:05:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:18:46 2025 by rpki-client